{"id":"GO-2025-3926","revision":"b2cdd55679f04a6aa0984242cf5b890b","records":[{"revision":"b2cdd55679f04a6aa0984242cf5b890b","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-3926","aliases":["CVE-2025-58158","GHSA-w469-hj2f-jpr5"],"title":"Harness Allows Arbitrary File Write in Gitness LFS server in github.com/harness/gitness","description":"Harness Allows Arbitrary File Write in Gitness LFS server in github.com/harness/gitness","state":0,"publishedAt":"2025-09-17T17:03:38+00:00","modifiedAt":"2025-09-17T17:27:12.391486+00:00","affected":[{"ecosystem":"Go","name":"github.com/harness/gitness","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.0.4-gitspaces-beta.0.20250808064055-21c5ce42ae13"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/harness/harness/security/advisories/GHSA-w469-hj2f-jpr5","https://github.com/harness/harness/commit/21c5ce42ae13740b1cad47706c2ec85e72cc8c20"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-3926","license":"OSV · upstream source license applies","key":"osv:GO-2025-3926","identifiers":["GO-2025-3926","CVE-2025-58158","GHSA-w469-hj2f-jpr5"]},"retained":false,"historicalAffected":[]}],"coverage":[]}